$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer File: 86b35f71-51ac-43ff-b604-cba3552c4c8c.cer (raw, json) Hash identifier: BkotDmZBWpuoYZN/YozuJR7vi1gNb4knYOPURVhkERg= Subject key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848387DC29E60145B7152467500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Dec 2024 01:45:32 +0000 Certificate not after: Sun 21 Mar 2027 00:45:32 +0000 Subordinate resources: AS: 46841 IP: 23.179.96.0/24 IP: 100.42.16.0/20 IP: 104.153.148.0/22 IP: 104.193.144.0/21 IP: 162.210.172.0/22 IP: 162.218.64.0/21 IP: 199.30.64.0/22 IP: 199.87.228.0/22 IP: 2604:b480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:7d:c2:9e:60:14:5b:71:52:46:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Dec 16 01:45:32 2024 GMT Not After : Mar 21 00:45:32 2027 GMT Subject: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:9b:a3:7e:e6:5d:e1:81:e7:2d:57:e2:bf:e3: eb:73:65:46:dd:cf:28:51:65:cb:49:d3:94:c9:c1: bf:7b:4d:56:9d:c2:6c:80:b4:cb:7a:2c:a0:3c:39: 90:a6:66:3b:84:ff:22:1f:08:ca:ee:cb:73:cd:ef: 10:13:58:c5:dd:ca:eb:50:b0:9e:a5:b6:b6:40:d2: 86:f6:bc:46:6a:24:4e:b7:da:77:72:5a:d1:a6:2d: f5:a4:20:66:55:6f:ed:a1:08:e3:59:a7:84:c9:98: 66:9b:b8:aa:d7:05:8b:3a:b4:73:8d:90:76:e1:81: be:5d:1e:9c:97:e3:24:8a:14:42:9c:df:3d:71:b9: d6:f5:52:c5:b3:dc:04:9b:8c:3c:4f:b4:01:e3:ee: 99:94:83:f9:0d:f3:8e:09:29:75:f7:12:e0:a7:27: 96:86:6c:d6:00:c6:37:77:48:6b:12:02:d1:1a:98: 0a:db:65:46:a6:16:85:81:fd:47:b5:92:7e:78:ec: ca:c5:82:81:6b:35:5e:84:7c:c5:12:99:a3:7e:69: fa:42:02:bc:5e:1a:4b:ff:50:90:bd:e5:a1:6a:ba: 26:a5:24:8b:4f:32:95:c3:b2:23:a3:54:1c:47:52: da:56:e3:c1:db:be:5e:1a:da:aa:35:15:66:9f:a9: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 23.179.96.0/24 100.42.16.0/20 104.153.148.0/22 104.193.144.0/21 162.210.172.0/22 162.218.64.0/21 199.30.64.0/22 199.87.228.0/22 IPv6: 2604:b480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46841 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:62:26:d3:f9:0f:e1:96:6a:25:d1:61:fe:07:8d:cb:27:0d: 36:53:24:43:ae:dd:4b:fb:09:83:df:94:c5:66:d2:3e:ef:3e: 50:7b:2b:21:63:e1:c3:42:00:7a:71:b5:1e:68:bb:ce:c0:64: fb:97:2d:fc:b1:2f:67:d9:39:57:56:32:e4:9b:7e:e9:18:f1: fe:5a:ae:f6:94:07:1e:f3:ea:49:dc:25:fb:96:cd:1e:0a:51: cd:6a:21:63:3c:9d:19:ef:fb:3e:9b:f6:50:26:5a:19:26:bb: 4b:44:9e:f4:c5:ad:16:cf:9a:af:8a:d9:c1:a3:02:b9:00:d1: 8c:19:ac:c6:8a:78:82:1c:03:9b:bf:81:15:bb:2e:b9:18:4c: 76:fa:f6:95:ca:cb:89:01:ab:02:ef:ce:40:3f:5d:5d:77:16: bb:50:86:4f:56:3f:35:0a:1e:00:28:99:88:cf:c3:50:4f:ff: b2:02:84:96:0a:e5:30:ce:6a:7e:64:00:6e:e0:37:27:b4:3d: b6:50:f7:4c:48:2d:1a:b6:60:89:04:ca:6f:1e:39:5d:4e:04: d0:b2:8c:83:21:e8:25:6c:76:7a:06:3d:b6:06:96:57:20:d8: dd:ca:9f:8e:f9:65:7b:24:2a:e9:02:0a:59:00:7a:33:f0:46: 6f:ab:81:4a -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUAQ0Mn0MoWEg4fcKeYBRbcVJGdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTIxNjAxNDUzMloXDTI3MDMyMTAwNDUzMlowLzEtMCsGA1UEAxMk ODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pujfuZd4YHnLVfiv+Prc2VG3c8oUWXLSdOU ycG/e01WncJsgLTLeiygPDmQpmY7hP8iHwjK7stzze8QE1jF3crrULCepba2QNKG 9rxGaiROt9p3clrRpi31pCBmVW/toQjjWaeEyZhmm7iq1wWLOrRzjZB24YG+XR6c l+MkihRCnN89cbnW9VLFs9wEm4w8T7QB4+6ZlIP5DfOOCSl19xLgpyeWhmzWAMY3 d0hrEgLRGpgK22VGphaFgf1HtZJ+eOzKxYKBazVehHzFEpmjfmn6QgK8XhpL/1CQ veWharompSSLTzKVw7Ijo1QcR1LaVuPB275eGtqqNRVmn6mKcwIDAQABo4IEVDCC BFAwHQYDVR0OBBYEFGScPf7T3z1rZ7xtvOkFvMBs5hzXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzg2YjM1ZjcxLTUxYWMtNDNmZi1i NjA0LWNiYTM1NTJjNGM4Yy84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUy YzRjOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAAXs2ADBARkKhADBAJomZQDBANowZADBAKi0qwD BAOi2kADBALHHkADBALHV+QwDQQCAAIwBwMFACYEtIAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDALb5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBALViJtP5D+GWaiXRYf4HjcsnDTZTJEOu3Uv7 CYPflMVm0j7vPlB7KyFj4cNCAHpxtR5ou87AZPuXLfyxL2fZOVdWMuSbfukY8f5a rvaUBx7z6kncJfuWzR4KUc1qIWM8nRnv+z6b9lAmWhkmu0tEnvTFrRbPmq+K2cGj ArkA0YwZrMaKeIIcA5u/gRW7LrkYTHb69pXKy4kBqwLvzkA/XV13FrtQhk9WPzUK HgAomYjPw1BP/7IChJYK5TDOan5kAG7gNye0PbZQ90xILRq2YIkEym8eOV1OBNCy jIMh6CVsdnoGPbYGllcg2N3Kn475ZXskKukCClkAejPwRm+rgUo= -----END CERTIFICATE-----Generated at Fri Apr 4 16:17:43 2025 by rpki-client